Last updated: August 30, 2025

ARW Solutions  Inc, DBA Byte Headz ("we," "our," or "us") is committed to protecting your privacy and upholding the highest standards of data protection. This policy explains how we handle personal data in the course of our business operations, including our website and our professional services.

We collect the following types of information:

• Information you provide directly to us: This includes identifiers such as your name, email address, phone number, and mailing address when you contact us, purchase our services, or subscribe to our communications. It also includes any content within your communications with us, such as emails or support messages.
• Commercial information: Records of services you’ve purchased or inquired about.
• Technical and usage information: Data collected automatically when you visit our website, including your IP address, browser type, device type, pages visited, and general location inferred from your IP address.
• Text message data: Any information you voluntarily provide when you opt-in to receive SMS communications from us.

Important note: The above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use your personal information to:

• Provide and maintain our website and services.
• Improve and personalize your experience.
• Communicate with you, including responding to inquiries and sending service-related notices.
• Send promotional content (only if you have opted in).
• Comply with legal obligations.
• Detect and prevent fraud or misuse of our services.

We adhere to the principles of purpose limitation and data minimization. We only collect and process personal data for the specific, explicit, and legitimate purposes outlined in this policy. We do not process data in a manner that is incompatible with these purposes, and we ensure that the data we collect is adequate, relevant, and limited to what is necessary for these purposes.

In the course of providing our automation services, we may be required to access, process, and store personal data within our customers' environments. In this capacity, we act as a "data processor" or "service provider," handling data on our customers' instructions. The customer is the "data controller" and is responsible for determining the types of data, the purposes, and the legal basis for processing.

When we access a customer's environment, we will process data in accordance with our contractual obligations to that customer, including a separate Data Processing Addendum (DPA) where applicable.

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the type of information and the context in which we collect it. We typically process data because:

• You have given us consent.
• We need it to perform a contract with you.
• It serves a legitimate business interest and is not overridden by your data protection rights.
• We are required to do so by law.

Depending on your location, including in the EEA, UK, or California, you have certain rights related to your personal data. These rights are protected under laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Your rights may include the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate data.
• Request deletion of your data.
• Object to or restrict how we use your data.
• Withdraw consent at any time.
• Request a copy of your data in a portable format.
• Opt out of the sale or sharing of personal data (we do not sell your data).

To exercise any of these rights, contact us at info@byteheadz.com. We may need to verify your identity before processing your request.

We do not sell your personal information. We may share it with:

• Trusted service providers and sub-processors: We may use third-party companies to help us operate our website or provide services. These providers, also known as sub-processors, may have access to your personal data as needed to perform their functions on our behalf. We conduct due diligence on our sub-processors and enter into appropriate data processing agreements with all such parties.
• Affiliates or successors: If we are involved in a merger, acquisition, or business reorganization.
• Government authorities or regulators: Where required by law.
• Legal advisors or others: To protect our rights or the safety of others.

We use cookies and similar technologies to:

• Enable basic website functionality.
• Analyze traffic and usage to improve the website.
• Remember your preferences.

You can control or disable cookies through your browser settings. Our website currently responds to Global Privacy Control (GPC) signals. We do not respond to older browser-based Do Not Track (DNT) signals.

We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying legal, accounting, or reporting requirements. Retention times vary depending on the type of data and the purpose of processing.

We employ a variety of technical, administrative, and physical safeguards designed to protect your personal information. These measures include data encryption, access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security. When operating in customer environments, we take reasonable measures to secure the data we access, but the security of the customer's environment remains the customer's responsibility.

In the event we receive a lawful and binding request for your data or your customer's data from a government authority, we will:

• Carefully review the request to ensure it is valid, legally binding, and does not violate applicable laws.
• Seek to limit the scope of the request to what is legally required.
• Notify you of the request unless we are legally prohibited from doing so.
• Challenge the request if we believe it is overbroad or unlawful.
  We are committed to defending our customers' data and will not voluntarily disclose it to government authorities.

Our services are not intended for children under 13. We do not knowingly collect data from children. If we become aware that a child has provided us with personal data, we will delete it.

If you are located outside the United States, be aware that your information may be transferred to, stored, and processed in the United States or other countries. We ensure appropriate safeguards are in place where required by law, including adherence to frameworks that facilitate lawful data transfers.

We may update this privacy policy from time to time. Any material changes will be posted on this page with a new "Last updated" date. If required, we will notify you via email or a notice on our website.

If you have any questions or concerns about this policy or your personal data, please contact us:

Byte Headz

Attn: Privacy Team

Email: info@byteheadz.com

Phone: +1 (904) 906-4096